Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File:                     mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier:          Cnsayvhr/039UyWfxIBIj9kJqC9D477CWXvCXe0ZOuw=
Subject key identifier:   DC:65:91:E7:55:4F:6B:38:1E:D7:B5:3E:55:39:6E:A4:FD:DB:44:AF
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer:       /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial:       0194BCA9C9E3A5919ECA921EF0D149F90128
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number:          106F
Signing time:             Fri 31 Jan 2025 14:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:31 +0000
Files and hashes:         1: UjP5WMZKRBsvIlHnzhDHFBUyi78.roa (hash: pQ6/nnpLIpK2rwKH9JMJUyXoOlk8zghaFAetdmitLfY=)
                          2: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: bMJLigOpI3KFOSTDdX+sJK3NO5i9UzPmFzdWMSmpATo=)
                          3: oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa (hash: xodF+0GY/o0dnV+Pf3SoupYGcpVAvzY6q/h09Jx9Nzo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:c9:e3:a5:91:9e:ca:92:1e:f0:d1:49:f9:01:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
        Validity
            Not Before: Jan 31 14:00:31 2025 GMT
            Not After : Feb  1 14:00:31 2025 GMT
        Subject: CN=dc6591e7554f6b381ed7b53e55396ea4fddb44af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:85:fc:a2:b7:79:a4:28:2d:40:99:d5:99:
                    a8:ed:d3:b7:89:ff:2d:22:98:5d:cc:9f:67:01:fb:
                    30:b6:62:9f:9f:d3:d7:8c:13:09:8c:fc:a1:ee:3a:
                    ae:23:6d:eb:17:c7:52:55:7b:92:ea:08:eb:60:37:
                    87:76:9c:d9:1c:50:c7:92:65:d7:ab:55:41:32:1f:
                    4f:4d:c7:bb:9a:33:c0:d2:30:70:21:1b:27:b0:57:
                    d4:e9:b6:94:e0:4f:21:2e:46:3c:d2:0a:87:d6:b3:
                    9a:ac:8e:9e:9f:3d:14:00:93:b1:f1:a9:e1:8a:f4:
                    db:40:7d:87:62:e5:99:a9:5f:6a:d2:b4:e8:95:8b:
                    73:cb:23:a5:f0:9b:7c:4b:d3:fe:a1:03:1f:99:6d:
                    04:51:7c:e9:00:ec:f2:ed:d6:65:0e:ae:c9:84:97:
                    7d:52:a7:39:b7:52:92:4b:68:01:ee:72:89:4d:60:
                    fa:78:1a:2a:a5:b1:3d:41:f5:fc:c4:25:76:29:d2:
                    73:62:d1:ed:06:23:03:1d:8e:31:2c:b9:07:09:b3:
                    72:f0:b3:bd:64:e0:a7:4d:0e:8b:bf:91:ce:96:cc:
                    70:8b:98:76:c0:b7:14:5e:fc:ea:57:06:99:52:bb:
                    83:48:49:fd:74:71:61:af:93:ec:89:dc:14:4e:f3:
                    78:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:65:91:E7:55:4F:6B:38:1E:D7:B5:3E:55:39:6E:A4:FD:DB:44:AF
            X509v3 Authority Key Identifier:
                keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:9b:e4:88:ff:b9:ca:e5:de:a6:70:e4:3f:f3:c6:7c:55:62:
         c5:11:8e:c1:51:d4:c1:ed:f9:fd:07:b9:44:d0:24:ee:f9:50:
         3c:a4:07:b3:4f:29:53:bf:cc:a5:4d:a2:24:2c:06:5f:39:7f:
         69:ab:b7:05:34:e2:ac:de:3e:6a:2e:82:c3:df:9b:bd:f0:c6:
         ec:e1:f0:19:fd:7e:f4:22:37:07:5c:6c:f0:9f:7d:68:32:e6:
         ee:a6:2f:f1:81:87:f0:7e:43:86:dc:eb:77:06:f6:58:e1:4a:
         7c:fe:93:bc:7e:5c:28:18:86:40:18:71:5b:27:26:e2:82:50:
         32:60:60:69:94:f6:3e:28:15:14:10:23:50:a1:06:8f:38:f3:
         df:b7:95:02:96:b6:b9:93:5e:99:42:f1:87:e3:4e:dd:d5:d5:
         a6:57:41:e4:b3:3c:d8:9e:7d:0d:d2:5e:f5:a9:de:58:3b:79:
         68:4c:65:7d:ee:e1:24:79:d0:5d:13:24:ec:2e:7d:47:36:d1:
         75:bc:c4:cd:55:79:15:69:39:4e:dd:03:f9:44:22:9d:c6:7e:
         86:9c:59:d6:5a:0d:e5:94:af:82:e0:ae:64:70:fd:de:43:ae:
         6d:59:00:76:4c:45:42:80:1c:13:5f:e1:72:92:7d:34:88:2f:
         fa:74:02:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:40 2025 by rpki-client